[PATCH proxmox-backup v2 42/43] docs: describe the privileges and roles for append only backup/sync

[Christian Ebner <c.ebner@proxmox.com>]

Complete the list with the newly added roles and permissions and
mention their intended usecase.

Signed-off-by: Christian Ebner <c.ebner@proxmox.com>
---
 docs/managing-remotes.rst |  6 +++++-
 docs/user-management.rst  | 16 ++++++++++++++++
 2 files changed, 21 insertions(+), 1 deletion(-)

diff --git a/docs/managing-remotes.rst b/docs/managing-remotes.rst
index 9f269b56b..b25e3d532 100644
--- a/docs/managing-remotes.rst
+++ b/docs/managing-remotes.rst
@@ -109,7 +109,11 @@ To set up sync jobs, the configuring user needs the following permissions:
   job, ``Datastore.Modify`` or ``Datastore.Read`` is required on the source
   datastore. Otherwise, ``Datastore.Backup`` is enough to configure a sync job
   limited to owned backup groups.
-* At least ``Datastore.Backup`` on the local target datastore (``/datastore/{store}``)
+* At least ``Datastore.Backup`` or ``Datastore.Append`` on the local target
+  datastore (``/datastore/{store}``). Using ``Datastore.Append`` enables
+  append-only sync jobs that can push or pull new snapshots and create
+  sub-namespaces, but lack permissions to read, restore, modify, or prune
+  existing backups.
 
 .. note:: A sync job can only sync backup groups that the configured remote's
   user/API token can read. If a remote is configured with a user/API token that
diff --git a/docs/user-management.rst b/docs/user-management.rst
index 066027edd..560009d3e 100644
--- a/docs/user-management.rst
+++ b/docs/user-management.rst
@@ -219,6 +219,11 @@ We currently support the following privileges:
   privileges of Datastore.Read and Datastore.Verify, but only if the backup
   group is owned by the user or one of its tokens.
 
+**Datastore.Append**
+  Datastore.Append allows a user or API token to append new backup snapshots and
+  create new namespaces, without granting privileges to read, restore, modify,
+  or prune existing backups.
+
 **Datastore.Prune**
   Datastore.Prune allows a user to delete snapshots, but additionally requires
   backup ownership.
@@ -238,6 +243,10 @@ We currently support the following privileges:
 **Remote.Read**
   Remote.Read allows a user to read data from a configured `Remote`.
 
+**Remote.DatastoreAppend**
+  Remote.DatastoreAppend allows pushing backups to a remote datastore using
+  append-only privileges.
+
 **Sys.Console**
   Sys.Console allows a user to access the system's console, note that for all
   but `root@pam` a valid system login is still required.
@@ -295,6 +304,10 @@ The following roles exist:
 **DatastoreBackup**
   Can backup and restore owned backups.
 
+**DatastoreAppend**
+  Can append new backups and create namespaces on a datastore, without reading,
+  restoring, or pruning existing data.
+
 **DatastorePowerUser**
   Can backup, restore, and prune *owned* backups.
 
@@ -307,6 +320,9 @@ The following roles exist:
 **RemoteSyncOperator**
   Is allowed to read data from a remote.
 
+**RemoteSyncAppendOperator**
+  Is allowed to push append-only backups to a remote.
+
 **TapeAdmin**
   Can do anything related to tape backup.
 
-- 
2.47.3